Entenda Antes – O Mundo da Construção Security & Risk Analysis

wordpress.org/plugins/entenda-antes-o-mundo-da-construcao

This is the bridge between your blog and Entenda Antes!

10 active installs v1.0.2 PHP 5.4+ WP 4.6+ Updated Feb 17, 2020
entenda-antes
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Entenda Antes – O Mundo da Construção Safe to Use in 2026?

Generally Safe

Score 85/100

Entenda Antes – O Mundo da Construção has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6yr ago
Risk Assessment

The 'entenda-antes-o-mundo-da-construcao' plugin v1.0.2 exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and not making external HTTP requests. The absence of known CVEs and vulnerability history is also a strength, suggesting a relatively stable and secure codebase in the past. However, significant concerns arise from the static analysis. A notable weakness is the presence of an unprotected REST API route, which presents a direct entry point without any authentication or permission checks. Furthermore, a concerning lack of output escaping across all identified outputs (0% properly escaped) opens the door to Cross-Site Scripting (XSS) vulnerabilities. The plugin also lacks nonce and capability checks, which are fundamental security mechanisms for preventing unauthorized actions and ensuring that actions are performed by authorized users.

Key Concerns

  • REST API route without permission callback
  • 0% of outputs properly escaped
  • No nonce checks
  • No capability checks
Vulnerabilities
None known

Entenda Antes – O Mundo da Construção Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Entenda Antes – O Mundo da Construção Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
454
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
0
Bundled Libraries
0

Output Escaping

0% escaped454 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<static-form> (static-form.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Entenda Antes – O Mundo da Construção Attack Surface

Entry Points2
Unprotected1

REST API Routes 1

POST/wp-json/v2budgetsclass-ea-integra.php:564

Shortcodes 1

[ea-integra-form] class-ea-integra.php:12
WordPress Hooks 2
actionrest_api_initclass-ea-integra.php:10
actionwp_enqueue_scriptsclass-ea-integra.php:11
Maintenance & Trust

Entenda Antes – O Mundo da Construção Maintenance & Trust

Maintenance Signals

WordPress version tested5.3.21
Last updatedFeb 17, 2020
PHP min version5.4
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs10
Alternatives

Entenda Antes – O Mundo da Construção Alternatives

No alternatives data available yet.

Developer Profile

Entenda Antes – O Mundo da Construção Developer Profile

jgalmeida93

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Entenda Antes – O Mundo da Construção

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/entenda-antes-o-mundo-da-construcao/js/inputmask.js/wp-content/plugins/entenda-antes-o-mundo-da-construcao/js/listeners.js/wp-content/plugins/entenda-antes-o-mundo-da-construcao/js/core.js/wp-content/plugins/entenda-antes-o-mundo-da-construcao/js/popper.min.js/wp-content/plugins/entenda-antes-o-mundo-da-construcao/js/bootstrap.min.js/wp-content/plugins/entenda-antes-o-mundo-da-construcao/css/reset.css/wp-content/plugins/entenda-antes-o-mundo-da-construcao/css/styles.css/wp-content/plugins/entenda-antes-o-mundo-da-construcao/css/bootswatch.css+1 more

HTML / DOM Fingerprints

CSS Classes
font-eaea-fieldea-optional-fieldea-masked-zipcode
Data Attributes
data-bs-toggledata-bs-targetaria-controlsaria-labelledby
JS Globals
window.EA_listeners
REST Endpoints
/wp-json/entenda-antes/v1/contacts
Shortcode Output
[ea-integra-form]
FAQ

Frequently Asked Questions about Entenda Antes – O Mundo da Construção